WEB PRIVACY POLICY

This privacy policy applies to this website (hereinafter the Website).
Please read it carefully. In it you will find important information about the processing of your personal data and the rights granted to you by current regulations on the matter.
We reserve the right to update our privacy policy at any time due to business decisions, as well as to comply with possible legislative or case law changes. If you have any questions or require any clarification regarding our Privacy Policy or your rights, you may contact us through the channels indicated below.
You declare that the data you provide to us, now or in the future, are correct and truthful and you undertake to inform us of any changes to them. In the event of providing personal data of third parties, you undertake to obtain their prior consent and to inform them about the content of this policy.
In general, the fields marked as mandatory in our forms must be completed in order to process your requests.

1. Who is responsible for the processing of your data? The controllers of the personal data collected on this website are:
TERRENO HOSPITALITY GROUP S.L. (hereinafter THG), with Tax ID: B-22898522 and SERVICIOS CORPORATIVOS PIÑERO, S.L. (hereinafter SCP), with Tax ID B55411474, both with registered address at Plaza Mediterraneo, 5. 07014. Palma de Mallorca, Balearic Islands, Spain.
THG is responsible for the processing necessary for the operation of the website and for managing reservations made through it.
SCP is responsible for consolidated processing activities for the entire Piñero group:

• Definition and control of the standards applied in the different business areas of the group;
• Quality management and improvement;
• Commercial use of data of clients and users of the different Piñero companies and brands: sending commercial communications, creation of commercial profiles and personalization of services.

In addition to the postal address indicated above, you may contact the controllers through the following means:
Telephone: 971 787 000
Data Protection Officer contact: dpd.privacy@grupo-pinero.com

2. For what purposes will we process your data and on what legal basis?

2.1. Management of the relationship with clients and users: We process the data that our clients and users provide in their inquiries in order to respond to their requests.
This processing is necessary for the performance of the legal relationship with website users or for the application of pre-contractual measures at your own request.

2.2. Management of accommodation and service bookings: The data provided in accommodation booking or service contracting forms will be processed for the management of such bookings and the provision of the requested services. The categories of data we process for these purposes are as follows:

• Identification data (name, surname and ID/passport) and contact data (address, email and telephone) of the booking holder;
• Booking data.
• Economic data and transactions relating to goods and services.

This data is obtained either directly from you or from third parties who have processed the booking or requested the service on your behalf, for example, the travel agency where you booked your stay.
The processing of this data is necessary for the provision of the requested services, the execution of the accommodation contract or for the application of pre-contractual measures at your own request.
Economic and transaction data relating to goods and services carried out on the website will be processed for accounting and administrative management purposes and for compliance with our legal obligations in accounting and tax matters.

2.3. Sending commercial communications and management of distribution lists: We process identification and contact data provided by our clients and by individuals who subscribe to our distribution lists in order to send them communications relating to our products and services.
These processing activities are based on our legitimate interest in promoting our services to our clients. In assessing this interest, it has been determined that the processing has a limited impact on the privacy of the data subjects, corresponds to their reasonable expectations and does not pose significant threats. Likewise, this processing is also based on your consent to receive such communications by electronic means. Failure to give consent or withdrawing it does not affect the management of your booking or the provision of contracted services.
At any time you may revoke your consent and request to unsubscribe from processing for commercial purposes by activating the link provided for this purpose in the commercial communications themselves or by sending an email with the subject “unsubscribe” to dpd.privacy@grupo-pinero.com

2.4. Administration and management of website security: We process browsing data (IP addresses or logs) in order to administer and manage the security of the website and its restricted access areas.
This processing is based on our legitimate interest in ensuring the security of the website. This interest is expressly recognized by Recital 49 of the GDPR. In balancing this interest against your rights and freedoms, it has been taken into account that this processing corresponds to general security practices and does not pose significant threats to data subjects.

2.5. Statistical and quality management purposes: In order to evaluate and manage the quality of our services, we may process identification and contact data provided by our clients and users to send them satisfaction surveys. For the same purpose, we process identification and contact data provided by our clients in their requests or suggestions. We also compile statistics from aggregated data obtained from website browsing data, e.g. IP address, weblogs, pages visited or actions carried out on the Website (+ info in our cookie policy).
These processing activities are based on our legitimate interest in evaluating and managing the quality of our services and products. In balancing this interest against your rights and freedoms, it has been determined that the processing has a limited impact on the privacy of the data subjects, corresponds to their reasonable expectations and does not pose significant threats.

3. To whom may we disclose your data?

Your data will only be disclosed to third parties by legal obligation, with your consent or when your request implies such communication.

4. How long will we retain your data?

As a general rule, we retain your data for the duration of the relationship you maintain with us and, in any case, for the periods provided for in applicable legal provisions, for example, in accounting and tax matters, and for the time necessary to address any liabilities arising from the processing. We will delete your data when they are no longer necessary or relevant for the purposes for which they were collected. Information related to browsing will be deleted once the web connection has ended and the statistics have been carried out.
Data processed for commercial purposes will be kept as long as you do not request their deletion or withdraw your consent to receive our commercial communications.
The media on which the existence of your consent for the processing of your data for commercial purposes is recorded, such as logs of electronic form submissions, will be retained for the entire duration of the processing and the applicable limitation periods.

5. What are your rights?

You have the right to obtain confirmation as to whether or not we are processing your personal data and, if so, to access them. You may also request that your data be rectified when they are inaccurate or that incomplete data be completed, as well as request their deletion when, among other reasons, the data are no longer necessary for the purposes for which they were collected.
In certain circumstances, you may request the restriction of the processing of your data. In such a case, we will only process the data concerned for the establishment, exercise or defense of legal claims or for the protection of the rights of other persons. Under certain conditions and for reasons related to your particular situation, you may also object to the processing of your data. In such a case, we will cease to process the data unless there are compelling legitimate grounds that override your interests or rights and freedoms, or for the establishment, exercise or defense of legal claims.
Likewise, under certain conditions, you may request the portability of your data so that they may be transmitted to another data controller.
At any time, you may withdraw the consent you have given for certain purposes, without this affecting the lawfulness of the processing based on consent prior to its withdrawal.
We inform you that the European Data Protection Regulation also recognizes the right to data portability.
You also have the right to object to automated individual decision-making that produces legal effects concerning you or similarly significantly affects you, where this right applies in accordance with Article 22 of Regulation (EU) 2016/679.
You also have the right to lodge a complaint with a data protection authority. You may consult the list and contact details of European data protection authorities on the European Commission website at http://ec.europa.eu/newsroom/article29/item-detail.cfm?item_id=612080.
To exercise your rights, you must send us a request by post or email to the relevant controller at the addresses indicated in the section Who is responsible for the processing of your data?
You may obtain more information about your rights and how to exercise them on the website of the Spanish Data Protection Agency at www.aepd.es or from the data protection authority in your country.